iPhone：什么是 WWDR 中级证书？
在 Apple 开发者门户的证书、开发者（或发行版）中，它说：
“如果您没有安装 WWDR 中间证书， 单击此处立即下载。”
我什至不知道这意味着什么。我需要下载并运行它吗？ 或者我只需要下载当前的证书？
In the Apple Developer Portal, in Certificates, Developer (or Distribution) it says:
"If you do not have the WWDR intermediate certificate installed,
click here to download now."
I don't even know what that means. Do I need to download and run that?
or do I need to only download the current certificate only?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（7）
您需要下载它并双击它。它将存储在您计算机的钥匙串中。它可以被最好地描述为类似根级证书颁发机构的东西，它确认您的开发或分发配置文件证书是由 Apple 的 WWDR 颁发的，而不是在其他地方伪造的。
You need to download it and double click on it. It will get stored in your computer's KeyChain. It can be described best as something like root level certificate authority that affirms that your development or distribution profile certificate was issued by Apple's WWDR and not forged somewhere else.
iPhone游戏开发一书说道：
iPhone Game Development book says:
需要 WWDR 证书来告诉 Xcode 您的其他证书是有效的。您需要将它们全部下载并将它们放在您的钥匙串上。
The WWDR certificate is needed to tell Xcode that your other certificates are valid. You need to download them all and drop them on your KeyChain.
需要 WWDR 证书，因为它包含证书颁发机构（CA）的公钥。这里的证书颁发机构是 Apple 本身（Apple Root CA）。
该证书是为了确保您的开发和分发证书确实是由 CA 颁发的，并且该证书的所有者（即您的身份）已得到验证。
有关证书颁发机构的 wiki
WWDR certificate is required since it contains the public key of the Certificate Authority(CA).Here the Certificate Authority is Apple itself(Apple Root CA).
This certificate is to ensure that your Development and Distribution certificates are indeed issued by the CA and the owner of that certificate(ie your identity) has been verified.
wiki regarding Certificate Authority
根据 Apple 的规定：
为了帮助保护客户和开发人员，我们要求所有第三方应用程序、Apple 钱包通行证、Safari 扩展、Safari 推送通知和 App Store 购买收据均由受信任的证书颁发机构签名。 Apple 全球开发者关系证书颁发机构颁发您用于签署 Apple 设备软件的证书，使我们的系统能够确认您的软件已按预期交付给用户且未经修改。
来源：https://developer.apple.com/support/certificates/expiration/
As per Apple :
To help protect customers and developers, we require that all third party apps, passes for Apple Wallet, Safari Extensions, Safari Push Notifications, and App Store purchase receipts are signed by a trusted certificate authority. The Apple Worldwide Developer Relations Certificate Authority issues the certificates you use to sign your software for Apple devices, allowing our systems to confirm that your software is delivered to users as intended and has not been modified.
Source : https://developer.apple.com/support/certificates/expiration/
我了解基本的公钥密码学。您在计算机上生成密钥对。然后，您将公钥上传到证书颁发机构，他们签名并将其返回给您。然后，您将证书安装在钥匙链上，并使用该证书在 XCode 中签署您的应用程序（使用私钥）。
非常简单。
WWDR 中级证书 (WWDRIC) 似乎不适合该模型。您只需下载一次（除非过期），并且您可能在很长一段时间内拥有多个开发人员签名证书。
我的假设是，它允许 Xcode 使用本地源（WWDRIC）验证您的开发人员证书，而不必继续到网络来验证您的签名证书。这可以避免与网络相关的延迟（或者您甚至可能不在网络上）。
I understand basic public key cryptography. You generate a key pair on your machine. Then you upload your public key to the certificate authority and they sign and return it to you. You then install the certificate on your key chain and use that to sign your apps in XCode (with the private key).
Pretty straight forward.
The WWDR Intermediate Certificate (WWDRIC) doesn’t seem to fit that model. You need to only download it once (unless it expires) and you may have multiple developer signing certificates over an extended period of time.
My hypothesis is that it allows Xcode to validate your developer certificates with a local source (the WWDRIC) and not have to go on to the network to validate your signing certificates. This avoids the latencies associated with networks (or you might not even be on the net).
根据我的经验，Apple WWDR 证书非常重要。如果您上传应用程序但未将其安装到钥匙串中，则您的应用程序将获得批准，但即使已准备好出售，也不会显示在 iTunes Store 上。
您将收到如下消息：
如果您要更改商店，那么您也会收到同一条消息。
希望它能帮助你。
As per My Experience Apple WWDR Certificate is very important. If you Upload Application without Installing it into Key-chains than your Application will be Approved but that will not show on to the iTunes Store even if it is ready for sale.
You will get the message like this:
If you'll change the Store then also you'll get the same message.
Hope it will help you.